Behavioral task
behavioral1
Sample
451e78703ddd299fb6d9b9f738bdc0b53d925855886b9317b8b8e6871d9ab153.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral2
Sample
451e78703ddd299fb6d9b9f738bdc0b53d925855886b9317b8b8e6871d9ab153.exe
Resource
win11-20240221-en
General
-
Target
451e78703ddd299fb6d9b9f738bdc0b53d925855886b9317b8b8e6871d9ab153
-
Size
266KB
-
MD5
1b0d4f5923c56351eec5937b05b1b2c3
-
SHA1
d98094046ca0c7e5ebffd36444371b929e98afae
-
SHA256
451e78703ddd299fb6d9b9f738bdc0b53d925855886b9317b8b8e6871d9ab153
-
SHA512
76bf15ff6d279d7c915a48ac6923a2f52673830d882af329dff282bde0ad862e59318adc23868920dbe8d53b1f64092aefdc8c4602ffb3466e4f17f0592e9c95
-
SSDEEP
3072:0NXEGZJWhfNFC4S60+XoLczrVmXe+vK3a1FLL5r6jQ6yGl1dnbTH01ne4PK:CXzKdNY49u8rVivuG1GlH301net
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 451e78703ddd299fb6d9b9f738bdc0b53d925855886b9317b8b8e6871d9ab153 unpack001/out.upx
Files
-
451e78703ddd299fb6d9b9f738bdc0b53d925855886b9317b8b8e6871d9ab153.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 368KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 163KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 101KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 114KB - Virtual size: 113KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 327KB - Virtual size: 326KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ